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Ref 

# 


Hits 


Search Query 


DBS 


Default 
ODerator 


Plurals 


Time Stamp 


LI 


6 


intrusion and (network near4 (alert 
warning notification)) and ((log$s 
and (group$5 classif$5 categoriz$5)) 
nearS attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 14:25 


L2 


70 


intrusion and (network near4 (alert 
warning notification)) and (log$5 
nearS analyz$5) and firewall 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 14:28 


L3 


9 


12 and ((group$5 classif$5 
categoriz$5) near6 attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 14:32 


L4 


0 


12 and ((group$5 classif$5 
categoriz$5) near6 attack) and 
((first and second) near5 analyzer) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 14:33 


L5 


1 


12 and ((group$5 classif$5 
categoriz$5) near6 attack) and 
((network and (client-specific (client 
near2 specific))) nearS attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


ON 


2007/11/16 14:34 


L6 


2 


12 and ((group$5 classif$5 
categoriz$5) with (attack 
vulnerability intrusion)) and 
((network and (client-specific (client 
near2 specific))) with (attack 
vulnerability intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 14:36 


L7 


2 


(alert warning notification) and 
(analyz$5 nearS (log$5 database 
repository datastore "data store")) 
and ((group$5 classif$5 categoriz$5) 
with (attack vulnerability 
intrusion)) and ((network and 
(client-specific (client near2 
specific))) with (attack vulnerability 
intrusion^ 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 14:50 


L8 


13 


((log$5 record$5) near5 (attack 
vulnerabilit$3 intrusion)) with 
((multiple "more than one" plurality 
couple) nearS network) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 14:45 
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L9 


1 


((generat$5 creat$5 issu$5) near6 
(alert warning notification)) and 
(analyz$5 near5 (log$5 database 
repository datastore "data store")) 
and ((group$5 classif$5 categoriz$5) 
with (attack vulnerabilit$3 
intrusion)) and ((network and 
(client-specific (client near2 
specific))) with (attack vulnerabilit$3 
intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 14:51 


L10 


122 


((generat$5 creat$5 issu$5) near6 
(alert warning notification)) and 
((group$5 classif$5 categoriz$5) 
with (attack vulnerabilit$3 
intrusion)) and (((network general) 
and (client-specific (client near2 
specific) specific)) with (attack 
vulnerability intrusion^ 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


ON 


2007/11/16 14:57 


Lll 


0 


110 and (priorotiz$5 near5 handl$5) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

IL/f 1 1 V^ 


OR 


ON 


2007/11/16 14:58 


L12 


121 


110 and (priority importance severity 
level) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 14:59 


L13 


98 


110 and ((priority importance 
severity level) near5 (attack 
vulnerabilit$4 compromiz$5 
intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 15:00 


L14 


17 


110 and (((priority importance 
severity level) nearS (attack 
vulnerabilit$4 compromiz$5 
intrusion)) with ((general network) 
near5 attack^ 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 15:50 


L15 


2 


"7152242".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 15:51 


L16 


2 


"5625518".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 15:52 
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L17 


2 


"5625815".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 15:54 


L18 


1290 


((network general) and (specific 
client)) near5 (attack intrusion 
vulnerabili$4) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 15:56 


L19 


8044 


((network general) and (specific 
client)) near5 (event incident attack 
intrusion vulnerabili$4) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 15:56 


L20 


4092 


119 and ((log$5 record$5) near5 
(attack vulnerabilit$3 event 
incident)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 15:58 


L21 


1819 


120 and (handl$5 near5 (attack 
vulnerabilit$5 event incident)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 16:04 


L22 


163 


120 and (prioritiz$5 near5 (attack 
vulnerabilit$5 event incident)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 16:12 


L23 


86 


122 and ((generat$5 creat$5 issu$5 
send$5) near5 (alert warning 
notification)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 16:14 


L24 


33 


123 and intrusion 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 16:36 


L25 


16 


124 and ((group$5 classif$5 
categoriz$5) near6 (attack 
vulnerabilit$3 incident)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/11/16 16:37 


SI 


125 


(intrusion near5 detect$5) and 
((sort$5 or filter$5) near5 attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:43 
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S2 


13 


SI and ((general and specific) near5 
attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/03/19 07:38 


S3 


3 


S2 and analyz$5 and filter$5 and 
(genera t$5 near5 alert) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/03/19 08:05 


S4 


2 


S2 and analyz$5 and (generat$5 
near5 alert) and firewall 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:05 


S5 


26 


SI and analyz$5 and (generat$5 
near5 alert) and firewall 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/03/19 08:08 


S6 


8 


S5 and (signature near5 database) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/11/16 14:20 


S7 


7 


S6 and ((add$5 or stor$5) near5 
signature) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:35 


S8 


19 


S5 not S7 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/03/19 08:35 


S9 


5 


S5 and ((log$5 near5 event) with 
database) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/03/19 08:42 


S10 


0 


"SYSTEM AND METHOD OF 
DEFINING THE SECURITY 
VULNERABILITIES OF A COMPUTER 
SYSTEM" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:42 


Sll 


21 


(intrusion near5 detect$5) and 
((sort$5 filter$5 ananlyz$5) near5 
(attack vulnerabilit$3 compromi$3)) 
and weight 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:44 
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S12 


2 


Sll and ((log event) near5 
database) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:45 


S13 


2 


Sll and (signature near5 database) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:45 


S14 


2 


S13 not S12 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR ' 


ON 


2007/03/19 08:48 


S15 


2 


"20040098623" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/19 08:48 


S16 


52 


(intrusion near4 detect$5) and 
((detect$5 and analyz$5) near5 
attack) and (generat$5 near6 alert) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/21 12:23 


S17 


15 


S16 and rate and frequency 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/21 12:24 


S18 


7 


S16 and ((rate frequency) near5 
attack) and log$5 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/21 12:00 


S19 


8 


726/23.ccls. and (intrusion near5 
detect$5) and (analyz$5 near5 
attack) and (generat$5 near5 
alarm) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 

lul l I VJ\J 


OR 


ON 


2007/03/21 12:08 


S20 


1 


726/25.ccls. and (intrusion near5 
detect$5) and (analyz$5 near5 
attack) and (generat$5 near5 

UlUl 1 1 1 J 


US-PGPUB; 
USPAT; 
EPO; JPO; 

DFRWFNT* 
IBM_TDB 


OR 


ON 


2007/03/21 12:20 


S21 


0 


((intrusion near5 detect$5) and 
(analyz$5 near5 attack) and 
(generat$5 near5 alarm)).clm. and 
726/23,25.ccls. 


US-PGPUB; 
USPAT 


OR 


ON 


2007/03/21 12:21 
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S22 


0 


((intrusion near5 detect$5) and 
(analyz$5 near5 attack) and 
faeneratSS nparS alarms dm 


US-PGPUB; 
USPAT 


OR 


ON 


2007/03/21 12:21 


S23 


83 


(intrusion near4 detect$5) and 
((detect$5 and analyz$5) near5 
(compromize attack vulnerability)) 
and (generat$5 near6 (warn$5 or 
alprt^ 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 

1UI 1 1 \J\J 


OR 


ON 


2007/03/21 12:23 


S24 


9 


S23 and ((rate frequency) nearS 
(attack vulnerability compromiz)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/21 12:25 


S25 


5 


(intrusion nearS detection) and 
((traffic and log and event) near5 
analyzer) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 
IDrl 1 wo 


OR 


ON 


2007/04/02 07:46 


S26 


10 


(intrusion near5 detection) and ((log 
and event) near5 analyzer) 


US-PGPUB; 

USPAT; 

EPO; JPO; 

DERWENT; 

TRM TDR 
iun i wo 


OR 


ON 


2007/04/02 07:48 


S27 


5 


S26 not S25 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 


OR 


ON 


2007/04/02 07:47 


S28 


4 


(intrusion near5 detection) and 
((analyz$5 nearS event) with 
(generat$5 nearS alert)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 

lUI l_ 1 L/U 


OR 


ON 


2007/04/02 07:58 


S29 


4 


S28 not S27 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TTiR 


OR 


ON 


2007/04/02 07:58 


S30 


1 


((determin$5 test$5) near5 
vulnerabilit$5) and ((analyz$5 near5 
event) with (generat$5 nearS alert)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 

IDI'I 1 WO 


OR 


ON 


2007/04/02 08:00 


S31 


588 


(compar$5 nearS (events attacks)) 
and (generat$5 near6 alert) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/04/02 09:01 
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S32 


0 


S31 and (determin$5 near5 
charactersitics) and ((first and 
second) near6 (host client)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:04 


S33 


4 


S31 and (determin$5 near5 
(fingerprint character$5 signature)) 
and ((first and second) near6 (host 
client)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:08 


S34 


8 


S31 and (compar$5 near5 
(fingerprint character$5 signature)) 
and ((first and second) near6 (host 
client)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/04/02 08:08 


S35 


4 


S34 not S33 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:10 


S36 


222 


(alert$5 near5 (new near5 (events 
attacks))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:11 


S37 


0 


((alert$5 near5 (new near5 (events 
attacks))) with (second near5 (client 
host "network device"))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:12 


S38 


0 


((alert$5 near5 (new near5 (events 
attacks))) with ((second other) 
near5 (client host "network 
device"))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:12 


S39 


21 


((alert$5 near5 (new near5 (events 
attacks))) and ((second other) 
near5 (client host "network 
device"))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:56 


S40 


4 


S39 and intrusion 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/04/02 08:58 


S41 


11 


(compar$5 near5 (events attacks)) 
and ((generat$5 near6 alert) with 
(new near5 (events attacks))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/04/02 09:04 
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S42 


1 


(compar$5 near5 (events attacks)) 
and ((generat$5 near6 (alert 
warning)) with (new near5 (attack 
vulnerabilit$5 compromi$5))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/04/02 09:04 


S43 


8 


(detect$5 near5 (events attack 
vulnerabilit$5 comprom$5)) and 
((generat$5 near6 (alert warning)) 
with (new near5 (attack 

\/i ilnprahilirtR rnnnnrnrriit^^ 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 


OR 


ON 


2007/04/02 10:47 


S44 


7 


S43 not S42 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

XWI 1 ■ I—' VJ 


OR 


ON 


2007/04/02 09:10 


S45 


5 


((first and second) near6 (warning 
alert)) and S43 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

IUI 1 1 L/LJ 


OR 


ON 


2007/04/02 09:13 






hill in and intrusion 

11111*11 I* Ul IVJ IMU U3IUII 


US-PGPUB' 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/04/02 09:13 


S47 


1 


"20030084344".PN. 


US-PGPUB 


OR 


ON 


2007/04/02 09:40 


S48 


701 


(generat$5 near5 (alert warning)) 
and (detect$5 nearS intru$6) 


US-PGPUB 


OR 


ON 


2007/04/02 09:41 


S49 


94 


S48 and (event nearS database) 


US-PGPUB 


OR 


ON 


2007/04/02 11:01 


S50 


0 


S49 and (((test$5 check$5) near8 
devices) with vulnerabilit$5) 


US-PGPUB 


OR 


ON 


2007/04/02 10:04 


S51 


334 


726/23-26.ccls. and (detect$5 near5 
intrusion) 


US-PGPUB 


OR 


ON 


2007/08/17 11:06 


S52 


3 


S51 and S43 


US-PGPUB 


OR 


ON 


2007/04/02 10:06 


S53 


76 


S51 and (analyz$5 near6 
(vulnerabilit$4 attack compromi$5)) 


US-PGPUB 


OR 


ON 


2007/04/02 10:07 


S54 


3 


S53 and (((generat$5 issu$5) near6 
alert) with (new nearS (attack 

VUII ICI CJUIUI4)-) CVCIll LUU IUI Ul II \y"JJJ 


US-PGPUB 


OR 


ON 


2007/04/02 10:08 


S55 


8 


((detect$5 check$5) nearS (events 
attack vulnerability comprom$5)) 
and ((generat$5 near6 (alert 
warning)) with (new near5 (attack 
vulnerabilit$5 compromi$5))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/04/02 10:48 
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S56 


7 


S55 and ((frequency rate) near8 
(attack vulnerabilit$4 
compromiz$5)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/04/02 10:49 


S57 


26 


S49 and ((first and second) near5 
network) 


US-PGPUB 


OR 


ON 


2007/04/03 12:51 


S58 


o 


"6671812" Dn 


US-PGPUB 


OR 


ON 


2007/04/03 12:52 


S59 


2 


"6671812".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/04/03 12:53 


S60 


2 


"6775780".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/04/03 13:02 


S61 


2 


"7165174".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/04/03 13:30 


S62 


2 


"6772346".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/04/03 13:30 


S63 


2 


"20040098623" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/09 14:46 


S64 


2 


"20030188194" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/09 15:47 


S65 


3 


"20020178383" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/09 16:03 


S66 


10 


(detect$5 with ((general and 
specific) near5 attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/09 16:11 
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S67 


0 


(detect$5 with ((general and 
client-specific) near5 (attack 
vulnerability comprom$5))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/09 16:12 


S68 


3 


(detect$5 with ((general and ((client 
node device) nearS specific)) with 
(attack vulnerability comprom$5))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/09 16:15 


S69 


2 


S68 not S66 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/09 16:14 


S70 


35 


((general and ((client node device) 
near5 specific)) with (attack 
vulnerability comprom$5)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/09 16:15 


S71 


33 


S70 not S69 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 09:55 


S72 


237 


(ids and ((detect$5 and analyz$5 
and log$5) near5 attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 09:57 


S73 


6 


S72 and (filter with alert) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 10:01 


S74 


20 


S72 and ((classif$5 categoriz$5) 
neanS attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 10:02 


S75 


13 


S74 and (plurality near5 network) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 10:06 


S76 


0 


S74 and (plurality near4 firewall) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 10:06 



11/16/07 5:26:41 PM 

C:\Documents and Settings\ASherkat\My Documents\EAST\Workspaces\10699005.wsp 



Page 10 



EAST Search History 



S77 


1 


S74 and ((multiple plurality) near4 
firewall) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 

LOl 1 1 WO 


OR 


ON 


2007/08/13 10:19 


S78 


2 


"20030046583" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 


OR 


ON 


2007/08/13 10:20 


S79 


2 


"20030226038" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 

1DI l_ 1 WD 


OR 


ON 


2007/08/13 10:52 


S80 


85305 


(plurality near3 (network analyzer 
firewall)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 12:13 


S81 


0 


(plurality near3 (network analyzer 
firewall)).clm. and "edge detection 
network".clm. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 


OR 


ON 


2007/08/13 12:14 


S82 


0 


(plurality near3 (network analyzer 
firewall)).clm. and "edge detection 
network" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 

IDI I 1 L/O 


OR 


ON 


2007/08/13 12:14 


S83 


0 


(plurality near3 (analyzer firewall)), 
elm. and "edge detection network" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 12:14 


S84 


0 


((plurality multiple) near3 (analyzer 
firewall)).clm. and "edge detection 
network" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TP)R 

1DI 1 1 WD 


OR 


ON 


2007/08/13 12:15 


S85 


0 


((plurality multiple) near3 (analyzer 
firewall)) and "edge detection 
network" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TT>R 

1DI 1 1 WD 


OR 


ON 


2007/08/13 12:15 


S86 


2 


IDS and "edge detection network" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 12:16 
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S87 


3367 


IDS and (edge NEAR5 (network 
database)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 12:16 


S88 


70 


IDS and (edge NEAR5 (network 
database)) and ((detect$5 analyz$5 
log$5) near5 attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 12:17 


S89 


6 


S88 and ((filter$5 classif$5 
categor$5) near5 attack) and 
(generat$5 near5 alert) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 12:18 


S90 


4 


S89 not S86 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 12:23 


S91 


2 


S88 and ((classif$5 and log$5) 
near5 attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 12:53 


S92 


2 


S91 not S86 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 12:24 


S93 


0 


S88 and (((personalized 
client-specific) and general) near5 
attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 12:27 


S94 


3 


S88 and (((personalized 
client-specific specific) and general) 
near5 attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 12:43 


S95 


0 


S88 and (((personalized 
client-specific specific host-based) 
and (general and "network based" 
network-based)) near5 (attack 
intrusion^ 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 12:45 


S96 


3 


S88 and (((personalized 
client-specific specific host-based) 
and (general and "network based" 
network-based)) with (attack 
intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 12:52 
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S97 


149 


(((personalized client-specific 
specific host-based) and (general 
and "network based" 
network-based)) with (attack 
intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


ON 


2007/08/13 12:52 


S98 


9 


S97 and ((classif$5 and log$5) 
near5 (attack intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 12:57 


S99 


83 


S97 and ((network-based and 
host-based) near5 (attack 
intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:03 


SIO 
0 


3 


S99 and ((plurality multiple) near5 
firewalls) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 12:57 


SIO 
1 


126 


S97 and (((network-based network) 
and (host client host-based)) near5 
(attack intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:20 


SIO 
2 


0 


S101 and ((worm and virus) near5 
(network near4 (attack intrusion))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:04 


SIO 
3 


1 


S101 and ((worm and virus) with 
(network near4 (attack intrusion))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:05 


SIO 
4 


22 


S101 and (targeted near4 (attack 
intrusion)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:05 


SIO 
5 


11 


S101 and (((network-based 
network) and (host client 
host-based)) near5 (polic$3 rules)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:32 


SIO 
6 


0 


S101 and (((network-based 
network) and (host client 
host-based)) near5 (detect$5 with' 
(polic$3 rules))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 13:24 
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SIO 
7 


21 


(plurality multiple) with (log near3 
analyzer) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/13 13:32 


SIO 
8 


0 


S107 and (detect$5 with ((network 
and host) near5 (intrusion attack))) 

• 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 13:33 


SIO 
9 


2 


S107 and (detect$5 near5 (intrusion 
attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 13:34 


Sll 
0 


1 


S107 and (analyz$5 near5 (intrusion 
attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 13:35 


Sll 
1 


1 


S107 and (analyz$5 near5 (intrusion 
attack vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 13:35 


Sll 
2 


1 


S107 and (analyz$5 near5 (intrusion 
attack vulnerabilit$3)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 15:51 


Sll 

3 


37 


((plurality multiple couple) near4 
analyzer) and (analyz$5 near5 
(intrusion attack vulnerabilit$3)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 15:52 


Sll 
4 


4 


S113 and ((plurality multiple) with 
firewall) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:09 


Sll 
5 


2 


S113 and ((plurality multiple) near5 
firewall) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:27 


Sll 
6 


2 


S113 and ((plurality multiple) near5 
(firewall "log analyzer")) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:10 
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Sll 
7 


69 


((analyz$5 log$3) near5 (intrusion 
attack vulnerabilit$3))and ((plurality 
multiple) near5 firewall) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/13 16:12 


Sll 
8 


69 


((analyz$5 log$3) near5 (intrusion 
attack vulnerabilit$3)) and 
((plurality multiple) near5 firewall) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

1UI 1 1 1— ' uJ 


OR 


ON 


2007/08/13 16:27 


Sll 
9 


10 


SI 18 and ((classif$5 categoriz$5 
group$4) near5 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 12:47 


S12 
0 


2 


S113 and ((plurality multiple) near5 
(firewall proxy)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:27 


S12 
1 


84 


((analyz$5 log$3) near5 (intrusion 
attack vulnerabilit$3)) and 
((plurality multiple) near5 (firewall 
proxy)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:29 


S12 

2 


2 


"20040098623" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:28 


S12 
3 


5 


((analyz$5 log$3) near5 (intrusion 
attack vulnerabilit$3)) and 
((plurality multiple) near5 (firewall 
proxy)) and (edge near3 network) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:29 


S12 
4 


5 


S123 not S122 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/13 16:31 


S12 
5 


0 


((classif$5 categoriz$5 group$4) 
near5 (attack vulnerability)) same 
((random general) and ((user client 
device) near3 specific)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 12:53 


S12 
6 


52 


((attack vulnerability)) with 
((random general) and ((user client 
device) near3 specific)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 12:53 
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S12 
7 


1246421 


IDS (intrusion near3 detection) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 13:42 


S12 
8 


207 


S127 and (((random general) and 
(((client machine device) near3 
specific) client-specific 
device-specific targeted)) near6 
(attack vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 14:16 


S12 
9 


193 


S128 and (analyz$5 near5 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 13:48 


S13 
0 


185 


S128 and ((analyz$5 and log$5) 
near5 (attack vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/14 13:48 


S13 
1 


40 


S130 and (severity importance) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 13:59 


S13 
2 


145 


S130 not S131 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/14 13:59 


S13 
3 


767698 


S132 (impact) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


ON 


2007/08/14 13:59 


S13 
4 


139 


S132 and (impact) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 13:59 


S13 
5 


143 


S132 and (classif$5 categoriz$5 
group$5) with (attack vulnerability) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:02 


S13 
6 


0 


S135 and (generat$5 near5 (alarm 
warning)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:02 
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S13 
7 


2 


S135 and (alarm warning) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TnR 
1DI V I_I UD 


OR 


ON 


2007/08/14 14:02 


S13 
8 


2 


S135 and firewall 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TT)R 

1DI 1 1 L/D 


OR 


ON 


2007/08/14 14:02 


S13 
9 


143 


S132 and ((classif$5 categoriz$5 
group$5) with (attack vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 
IDI V I__ 1 UD 


OR 


ON 


2007/08/14 14:02 


S14 
0 


142 


S139 and analyzer 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 
1DI V I 1 UD 


OR 


ON 


2007/08/14 14:03 


S14 
1 


143 


S139 and ((analyz$5 log$5) near5 
(attack vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 


OR 


ON 


2007/08/14 14:03 


S14 
2 


2 


S141 and (multiple plurality couple) 
near8 network 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 


OR 


ON 


2007/08/14 14:03 


S14 
3 


1 


S142 not S138 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 
1C51 V I 1 UD 


OR 


ON 


2007/08/14 14:04 


S14 
4 


1 


S142 not S137 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 
1DI V I 1 UD 


OR 


ON 


2007/08/14 14:05 


S14 
5 


3 


S141 and (access near7 (rules 
policies)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 
1DI V I__ 1 UD 


OR 


ON 


2007/08/14 14:06 


S14 
6 


1 


S141 and (compar$5 near7 (attack 
vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:08 



11/16/07 5:26:41 PM 

C:\Documents and Settings\ASherkat\My Documents\EAST\Workspaces\10699005.wsp 



Page 17 



EAST Search History 



S14 
7 


140 


S141 and ((check$5 contrast$5) 
near7 (attack vulnerability)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:14 


S14 
8 


0 


726/23,25.ccls. and S147 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

XL/I 1 1 IV VJ 


OR 


ON 


2007/08/14 14:14 


S14 
9 


0 


726/23-25.ccls. and S147 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 14:50 


S15 
0 


23 


726/22-25.ccls. and (((random 
general) and (((client machine 
device) near3 specific) client-specific 
device-specific targeted)) near6 

( 7kW~7\r\t v/i iln^rahilitv^ 
^dLLaLr\ VUII ICI dUIMLy )) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TBM TDB 


OR 


ON 


2007/08/14 14:48 


S15 
1 


18 


S150 and (rate frequency) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:38 


S15 
2 


7 


S150 and ((rate frequency) near6 
(attack vulnerability compromi$3)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDB 


OR 


ON 


2007/08/14 14:44 


S15 
3 


2 


"20040098623" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

1UI 1 1 UU 


OR 


ON 


2007/08/14 14:44 


S15 
4 


4 


S150 and (match$5 with attack) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TDR 


OR 


ON 


2007/08/14 14:49 


S15 
5 


351 


726/23-25.ccls. and ((compar$5 
match$5 check$5) near7 signature) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:50 


S15 
6 


3 


726/23-25.ccls. and (((compar$5 
match$5 check$5) near7 signature) 
same ((general ranom) near4 
attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 14:52 
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S15 
7 


2 


726/23-25.ccls. and (((compar$5 
match$5 check$5) near7 signature) 
same (((general ranom) and 
(targeted specific))near4 attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR . 


ON 


2007/08/14 14:52 


S15 
8 


2 


726/23-25.ccls. and (((compar$5 
match$5 check$5) near7 signature) 
same (((general ranom) and 
(targeted specific)) near4 attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


ON 


2007/08/14 14:52 


S15 
9 


2 


726/23-25.ccls. and (((compar$5 
match$5 check$5) near7 
(characterisitc signature)) same 
(((general ranom) and (targeted 
specific)) near4 attack)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 14:54 


S16 
0 


2 


726/23-25. eels, and (((compar$5 
match$5 check$5) near7 
(characterisitc signature)) same 
(((general ranom) and (targeted 
specific)) near4 (vulnerability 
attack))) and ((DoS "denial of 
service") and (worm virus)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 14:59 


S16 
1 


10976 


((classif$5 categor$4 group$5) with 
(attack vulnerability compromiz$5)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 15:01 


S16 
2 


0 


((classif$5 categor$4 group$5) 
near7 (attack vulnerabilit$3 
compromiz$5)) with (logged near5 
(attack vulnerabilit$3 
compromiz$5)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 15:02 


S16 
3 


12 


((classif$5 categor$4 group$5) 
near7 (attack vulnerabilit$3 
compromiz$5)) with ((stored 
recorded logged) near5 (attack 
vulnerabilit$3 compromiz$5)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 15:11 


S16 
4 


20 


((classif$5 categor$4 group$5 
defin$5) near7 (attack vulnerabilit$3 
compromiz$5)) with ((stored 
recorded logged) near5 (attack 
vulnerabilit$3 compromiz$5)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/14 15:11 


S16 
5 


8 


S164 not S163 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/14 15:59 
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S16 
6 


1 


sherkat.xa. and firewall and pinhole 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM TT)R 


OR 


ON 


2007/08/14 15:59 


S16 
7 


170366 


((plurality multiple couple) nearS 
(networks subnets)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/15 16:52 


S16 
8 


10 


S167 and ((classif$5 categoriz$5 
group$5) near5 (attack 
vulnerabilit$4)) with log$4 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 


OR 


ON 


2007/08/15 16:57 


S16 
9 


6 


S167 and ((classif$5 categoriz$5 
group$5) nearS (attack 
vulnerability)) with (log$4 near5 
(attack vulnerabilit$4)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/15 17:03 


S17 
0 


0 


(detect$5 near4 intrusion) and 
(((classif$5 categoriz$5 group$5 
rank$5) near5 (attack vulnerability 
compromiz$5)) same ((compar$5 
check$5) near7 ((logged recorded 
database datastore table) nearS 
(attack vulnerabilit$4 
compromiz$5)))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/15 17:07 


S17 
1 


3 


(((classif$5 categoriz$5 group$5 
rank$5) nearS (attack vulnerabilit$4 
compromiz$5)) same ((compar$5 
check$5) near7 ((logged recorded 
database datastore table) near5 
(attack vulnerabilit$4 
compromiz$5)))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/15 17:07 


S17 
2 


18 


(((classif$5 categoriz$5 group$5 
rank$5) with (attack vulnerabilit$4 
compromiz$5)) same ((compar$5 
check$5) with ((logged recorded 
database datastore table) near5 
(attack vulnerabilit$4 

LV\\\\J\VlU\£.yD )))) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/15 17:31 


S17 
3 


3231 


726/23-27.ccls. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/15 17:31 
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S17 
4 


55 


(((classif$5 categoriz$5 group$5 
rank$5 determin$5) with (attack 
vulnerabilit$4 compromiz$5)) same 
((compar$5 check$5) with ((logged 
recorded database datastore table) 
near5 (attack vulnerabilit$4 

rnmnromi7 < t I i^^ 

Wl 1 ipi \JI 1 1 J J J J 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


ON 


2007/08/15 17:32 


S17 
5 


25 


S174 and S173 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/08/15 17:42 


S17 
6 


30 


S174 not S175 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDR 


OR 


ON 


2007/08/15 17:42 


S17 
7 


15 


S176 and (IDS intrusion) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

lull 1 LsV 


OR 


ON 


2007/08/16 11:13 


S17 
8 


2 


"5541995".pn. 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/08/16 11:13 


S17 
9 


1049 


726/23-27.ccls. and ((detect$5 
near5 intrusion) IDS) 


US-PGPUB 


OR 


ON 


2007/08/17 11:06 


S18 
0 


262 


S179 and ((characteriz$5 group$5 
classif$5 determin$5 categoriz$5) 
with (attack vulnerability 
compromiz$4)) 


US-PGPUB 


OR 


ON 


2007/08/17 11:07 


S18 
1 


49 


S180 and (("based on" according 
compa$5 check$5 test$5) with 
((logged recorded database 
datastore "data store" "data base" 
table) near7 (attack vulnerabilit$4 
compromiz$4))) 


US-PGPUB 


OR 


ON 


2007/08/17 11:10 


S18 
2 


50 


S180 and (("based on" accord$5 
compa$5 check$5 test$5) with 
((logged recorded database 
datastore "data store" "data base" 
table) near7 (attack vulnerability 

LUIIipi \J\\\\Lyr\) ) J 


US-PGPUB 


OR 


ON 


2007/08/17 11:35 


S18 
3 


22 


S180 and (analyz$5 with ((logged 
recorded database datastore "data 
store" "data base" table) near7 
(attack vulnerabilit$4 
compromiz$4))) 


US-PGPUB 


OR 


ON 


2007/08/17 11:35 
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S18 
4 


16 


S183 not S182 


US-PGPUB 


OR 


ON 


2007/08/17 11:45 


S18 
5 


20 


S182 and ((random general) with 
(attack vulnerabilit$4 
compromiz$4)) 


US-PGPUB 


OR 


ON 


2007/08/17 11:45 


S18 
6 


18 


S182 and ((random general) near4 
(attack vulnerabilit$4 
compromiz$4)) 


US-PGPUB 


OR 


ON 


2007/08/17 12:38 


S18 
7 


0 


"7017186".pn. 


US-PGPUB 


OR 


ON 


2007/08/17 12:38 


S18 
8 


1 


"10208485" 


US-PGPUB 


OR 


ON 


2007/08/17 12:39 


S18 
9 


1 


"10/208485" 


US-PGPUB 


OR 


ON 


2007/08/17 12'39 


S19 
0 


1 


"10/208,485" 


US-PGPUB 


OR 


ON 


2007/08/17 12'39 


S19 
1 


8 


dav.in. and intrusion 

\m*\A J all ■ • VII IVJ II W Jlwl 1 


US-PGPUB 


OR 


ON 


2007/08/17 15:36 


S19 
2 


1 


"20060107317" 


US-PGPUB 


OR 


ON 


2007/08/18 16:34 


S19 
3 


5928 


edge near5 network 


US-PGPUB 


OR 


ON 


2007/08/18 16:35 


S19 
4 


2060 


S193 and (ids "intrusion detection") 


US-PGPUB 


OR 


ON 


2007/08/18 16:35 


S19 
5 


83 


S194 and (detect$5 nearS (attack 
vulnerability)) 


US-PGPUB 


OR 


ON 


2007/08/18 16:36 


S19 
6 


73 


S195 and ((plurality multiple couple 
different) nearS network) 


US-PGPUB 


OR 


ON 


2007/08/18 16:36 


S19 
7 


74 


S195 and ((plurality multiple couple 
different) near5 (network firewall 
analyzer detector)) 


US-PGPUB 


OR 


ON 


2007/08/18 16:37 


S19 
8 


7 


S197 and ("denial of service" 
denial-of-service^ and (worm virus^ 


US-PGPUB 


OR 


ON 


2007/08/18 16:44 


S19 
9 


3 


S197 and ("denial of service" 
denial-of-service) and ((attack 
vulnerabilit$4) nearS signature) 


US-PGPUB 


OR 


ON 


2007/08/18 16:43 


S20 
0 


0 


S199 not S198 


US-PGPUB 


OR 


ON 


2007/08/18 16:43 


S20 
1 


19 


S197 and ((database log$5 table 
datastore) with (worm virus 
signature)) 


US-PGPUB 


OR 


ON 


2007/08/18 16:45 


S20 
2 


16 


S201 not S198 


US-PGPUB 


OR 


ON 


2007/08/18 17:05 
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